Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4f81ab18-f8c2-35ef-8158-aa4d83f1e9c1.roa
File: 4f81ab18-f8c2-35ef-8158-aa4d83f1e9c1.roa (raw, json)
Hash identifier: aBhCupmyhpKCs1xR/Dk4s/OgK3yV8xVbgpmm78N9E5E=
Subject key identifier: 40:2E:AF:B7:AD:85:B7:39:79:E9:43:06:94:A8:6E:DB:C7:DE:C2:5A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E6767B2C64E3FBB0E8D01FB30
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4f81ab18-f8c2-35ef-8158-aa4d83f1e9c1.roa
Signing time: Tue 28 Jun 2022 12:00:00 +0000
ROA not before: Tue 28 Jun 2022 12:00:00 +0000
ROA not after: Wed 03 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 161.188.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:67:67:b2:c6:4e:3f:bb:0e:8d:01:fb:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 28 12:00:00 2022 GMT
Not After : Aug 3 04:00:00 2022 GMT
Subject: CN=e2eef6c7-e957-41c7-a03e-a5d5ae8c8807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:07:9f:72:e0:bb:6f:79:46:d4:bb:85:ac:1f:
d9:d9:9c:72:24:d7:ef:4f:57:4b:fa:98:5e:fa:93:
7f:0c:4e:1c:26:d9:15:cf:40:4f:a7:c3:ee:05:57:
06:c2:f8:96:63:b3:17:7c:c4:25:9d:0f:39:9b:b4:
ba:fb:92:c4:54:a7:be:1b:10:7e:e6:c8:e0:c8:de:
b7:4b:01:74:aa:05:dd:bd:fe:d7:62:a2:4c:91:be:
6d:87:2c:e8:ae:4d:38:83:04:d8:71:2f:5d:5f:9d:
5e:b4:11:3c:72:ab:e6:21:09:bd:4f:a3:05:62:06:
fd:08:de:25:78:20:f7:f1:e2:d3:9d:a1:b9:d9:6f:
42:10:ec:bc:83:06:b0:94:dd:5d:30:08:12:46:ee:
d4:78:76:42:66:32:97:9a:a1:e5:d2:59:3e:93:87:
ff:ee:67:4d:30:7d:76:86:8e:a6:6e:97:85:cf:9d:
4a:0a:de:eb:0a:da:49:13:e4:3e:b3:fa:04:a1:47:
52:c8:3b:fe:07:54:56:b5:55:bc:66:21:19:57:f0:
2a:01:c5:c1:87:af:34:dd:f4:4c:05:69:c4:28:14:
17:96:c7:d8:74:bc:92:e1:75:58:58:af:4d:4c:79:
ee:35:ba:00:b9:91:b3:11:d6:0a:45:5a:70:33:2f:
49:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:2E:AF:B7:AD:85:B7:39:79:E9:43:06:94:A8:6E:DB:C7:DE:C2:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4f81ab18-f8c2-35ef-8158-aa4d83f1e9c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
161.188.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:06:cb:d3:e7:ff:89:ac:19:a9:94:3e:29:06:23:c5:81:c9:
41:4b:87:23:04:e1:05:b8:c4:84:8d:c2:91:69:d6:37:18:12:
5a:ab:83:9a:c8:c2:15:1e:2d:ce:68:d4:c0:ab:d7:9e:de:66:
f1:2b:bd:54:3a:77:24:fc:ab:3d:05:c4:84:35:63:31:90:b8:
be:08:2b:63:94:bc:73:4a:c5:9a:52:66:b1:2b:3d:97:f2:90:
c9:fd:68:7f:c4:3a:de:d2:f2:c1:1f:62:b6:6f:92:ea:1b:e1:
56:9f:a8:96:58:97:7a:6e:60:e8:18:9c:a2:7e:9d:67:fe:78:
b6:f5:b5:6a:a1:a1:ae:72:77:03:d7:a3:b8:12:64:a3:79:e0:
44:e7:a9:a2:e4:e2:e4:6f:64:18:fa:a9:48:ce:9c:2b:c3:2f:
f7:84:87:2f:9d:5c:ab:f7:f9:be:0e:34:fa:36:3a:be:52:3a:
b2:14:2b:ee:4f:9c:98:a6:c4:65:f7:93:99:90:ff:75:5f:9b:
43:5c:9e:dd:14:e1:9d:54:b5:55:cf:e4:0d:81:68:96:1e:35:
83:b2:f5:5d:5f:b9:89:0c:91:7b:54:32:99:6e:e5:1f:00:c5:
3f:87:7c:5e:7c:16:ba:50:0e:0e:fa:34:51:ec:5d:97:c3:5f:
c8:6a:9b:1d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD5nZ7LGTj+7Do0B+zAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDYyODEyMDAwMFoXDTIyMDgwMzA0MDAwMFowLzEtMCsGA1UEAxMk
ZTJlZWY2YzctZTk1Ny00MWM3LWEwM2UtYTVkNWFlOGM4ODA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngefcuC7b3lG1LuFrB/Z2ZxyJNfvT1dL+phe
+pN/DE4cJtkVz0BPp8PuBVcGwviWY7MXfMQlnQ85m7S6+5LEVKe+GxB+5sjgyN63
SwF0qgXdvf7XYqJMkb5thyzork04gwTYcS9dX51etBE8cqvmIQm9T6MFYgb9CN4l
eCD38eLTnaG52W9CEOy8gwawlN1dMAgSRu7UeHZCZjKXmqHl0lk+k4f/7mdNMH12
ho6mbpeFz51KCt7rCtpJE+Q+s/oEoUdSyDv+B1RWtVW8ZiEZV/AqAcXBh6803fRM
BWnEKBQXlsfYdLyS4XVYWK9NTHnuNboAuZGzEdYKRVpwMy9JjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEAur7ethbc5eelDBpSobtvH3sJaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNGY4MWFiMTgtZjhjMi0z
NWVmLTgxNTgtYWE0ZDgzZjFlOWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGobyAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC0Gy9Pn/4msGamUPikGI8WByUFLhyME4QW4xISNwpFp1jcYElqrg5rI
whUeLc5o1MCr157eZvErvVQ6dyT8qz0FxIQ1YzGQuL4IK2OUvHNKxZpSZrErPZfy
kMn9aH/EOt7S8sEfYrZvkuob4VafqJZYl3puYOgYnKJ+nWf+eLb1tWqhoa5ydwPX
o7gSZKN54ETnqaLk4uRvZBj6qUjOnCvDL/eEhy+dXKv3+b4ONPo2Or5SOrIUK+5P
nJimxGX3k5mQ/3Vfm0Ncnt0U4Z1UtVXP5A2BaJYeNYOy9V1fuYkMkXtUMplu5R8A
xT+HfF58FrpQDg76NFHsXZfDX8hqmx0=
-----END CERTIFICATE-----
Generated at Sun Jun 15 23:34:40 2025 by rpki-client